ControlPolicyArgs

data class ControlPolicyArgs(val aclAction: Output<String>? = null, val applicationName: Output<String>? = null, val description: Output<String>? = null, val destPort: Output<String>? = null, val destPortGroup: Output<String>? = null, val destPortType: Output<String>? = null, val destination: Output<String>? = null, val destinationType: Output<String>? = null, val direction: Output<String>? = null, val ipVersion: Output<String>? = null, val lang: Output<String>? = null, val proto: Output<String>? = null, val release: Output<String>? = null, val source: Output<String>? = null, val sourceIp: Output<String>? = null, val sourceType: Output<String>? = null) : ConvertibleToJava<ControlPolicyArgs>

Provides a Cloud Firewall Control Policy resource. For information about Cloud Firewall Control Policy and how to use it, see What is Control Policy.

NOTE: Available since v1.129.0.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const example = new alicloud.cloudfirewall.ControlPolicy("example", {
applicationName: "ANY",
aclAction: "accept",
description: "example",
destinationType: "net",
destination: "100.1.1.0/24",
direction: "out",
proto: "ANY",
source: "1.2.3.0/24",
sourceType: "net",
});
import pulumi
import pulumi_alicloud as alicloud
example = alicloud.cloudfirewall.ControlPolicy("example",
application_name="ANY",
acl_action="accept",
description="example",
destination_type="net",
destination="100.1.1.0/24",
direction="out",
proto="ANY",
source="1.2.3.0/24",
source_type="net")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var example = new AliCloud.CloudFirewall.ControlPolicy("example", new()
{
ApplicationName = "ANY",
AclAction = "accept",
Description = "example",
DestinationType = "net",
Destination = "100.1.1.0/24",
Direction = "out",
Proto = "ANY",
Source = "1.2.3.0/24",
SourceType = "net",
});
});
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cloudfirewall"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudfirewall.NewControlPolicy(ctx, "example", &cloudfirewall.ControlPolicyArgs{
ApplicationName: pulumi.String("ANY"),
AclAction: pulumi.String("accept"),
Description: pulumi.String("example"),
DestinationType: pulumi.String("net"),
Destination: pulumi.String("100.1.1.0/24"),
Direction: pulumi.String("out"),
Proto: pulumi.String("ANY"),
Source: pulumi.String("1.2.3.0/24"),
SourceType: pulumi.String("net"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cloudfirewall.ControlPolicy;
import com.pulumi.alicloud.cloudfirewall.ControlPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ControlPolicy("example", ControlPolicyArgs.builder()
.applicationName("ANY")
.aclAction("accept")
.description("example")
.destinationType("net")
.destination("100.1.1.0/24")
.direction("out")
.proto("ANY")
.source("1.2.3.0/24")
.sourceType("net")
.build());
}
}
resources:
example:
type: alicloud:cloudfirewall:ControlPolicy
properties:
applicationName: ANY
aclAction: accept
description: example
destinationType: net
destination: 100.1.1.0/24
direction: out
proto: ANY
source: 1.2.3.0/24
sourceType: net

Import

Cloud Firewall Control Policy can be imported using the id, e.g.

$ pulumi import alicloud:cloudfirewall/controlPolicy:ControlPolicy example <acl_uuid>:<direction>

Constructors

Link copied to clipboard
constructor(aclAction: Output<String>? = null, applicationName: Output<String>? = null, description: Output<String>? = null, destPort: Output<String>? = null, destPortGroup: Output<String>? = null, destPortType: Output<String>? = null, destination: Output<String>? = null, destinationType: Output<String>? = null, direction: Output<String>? = null, ipVersion: Output<String>? = null, lang: Output<String>? = null, proto: Output<String>? = null, release: Output<String>? = null, source: Output<String>? = null, sourceIp: Output<String>? = null, sourceType: Output<String>? = null)

Properties

Link copied to clipboard
val aclAction: Output<String>? = null

The action that Cloud Firewall performs on the traffic. Valid values: accept, drop, log.

Link copied to clipboard
val applicationName: Output<String>? = null

The application type supported by the access control policy. Valid values: ANY, HTTP, HTTPS, MQTT, Memcache, MongoDB, MySQL, RDP, Redis, SMTP, SMTPS, SSH, SSL, VNC.

Link copied to clipboard
val description: Output<String>? = null

The description of the access control policy.

Link copied to clipboard
val destination: Output<String>? = null

The destination address defined in the access control policy.

Link copied to clipboard
val destinationType: Output<String>? = null

DestinationType. Valid values: If Direction is in, the valid values are net, group. If direction is out, the valid values are net, group, domain, location.

Link copied to clipboard
val destPort: Output<String>? = null

The destination port defined in the access control policy.

Link copied to clipboard
val destPortGroup: Output<String>? = null

The destination port address book defined in the access control policy.

Link copied to clipboard
val destPortType: Output<String>? = null

The destination port type defined in the access control policy. Valid values: group, port.

Link copied to clipboard
val direction: Output<String>? = null

Direction. Valid values: in, out.

Link copied to clipboard
val ipVersion: Output<String>? = null

The ip version.

Link copied to clipboard
val lang: Output<String>? = null

DestPortGroupPorts. Valid values: en, zh.

Link copied to clipboard
val proto: Output<String>? = null

Proto. Valid values: TCP, UDP, ANY, ICMP.

Link copied to clipboard
val release: Output<String>? = null

Specifies whether the access control policy is enabled. By default, an access control policy is enabled after it is created. Valid values: true, false.

Link copied to clipboard
val source: Output<String>? = null

Source.

Link copied to clipboard
val sourceIp: Output<String>? = null

The source ip.

Link copied to clipboard
val sourceType: Output<String>? = null

SourceType. Valid values: If direction is in, the valid values are net, group, location. If direction is out, the valid values are net, group.

Functions

Link copied to clipboard
open override fun toJava(): ControlPolicyArgs